Last updated: 2026-05-01
Your audio recording is sent directly to OpenAI's Whisper API for transcription in real time. The raw audio is never stored by Cleriona. OpenAI does not retain audio beyond the duration of the transcription request. Only the resulting text is kept.
The transcribed text of your requests is stored and may be used to monitor for abuse, improve AI accuracy, and debug service issues.
We do not sell your data to third parties or use it for advertising.
All payment processing is handled by Stripe, Inc. We do not store, log, or have access to your card number, CVV, or other payment credentials. Stripe stores this data under their own PCI-DSS-compliant infrastructure.
When you register or log in, we collect technical information about your device: brand, model, operating system version, OS build ID, total memory, and application ID. This data is combined and converted to a one-way cryptographic hash (SHA-256) before being sent to our servers. We use this hash solely to prevent abuse of our free tier and to detect fraudulent account creation.
We do not use device data for advertising, profiling, or any purpose other than fraud prevention. The original device attributes never leave your device — only the hash is transmitted.
Legal basis: legitimate interest (Article 6(1)(f) GDPR).
If you choose to sign in with Google, we receive your email address, Google account ID, and email verification status from Google. We use these solely to create and authenticate your account. We do not access any other Google data (contacts, calendar, photos, etc.) and we do not post anything on your behalf.
Legal basis: consent (Article 6(1)(a) GDPR), given by tapping "Continue with Google".
We use the following sub-processors:
If you are located in the European Economic Area, you have the right to request deletion of your personal data at any time.
Via the app: go to Profile → Delete account. This permanently deletes your account and all associated data within 24 hours.
By email: send a request to info@cleriona.com. We will respond within 30 days.
Account data is retained for as long as your account is active. Request logs are retained for up to 12 months. Upon account deletion, all personal data is removed within 24 hours except where retention is required by law.
Privacy questions or data requests: info@cleriona.com